From: "Peter Müller" <peter.mueller@ipfire.org>
To: development@lists.ipfire.org
Subject: Re: [PATCH] libarchive: Update to version 3.6.1
Date: Sun, 11 Sep 2022 14:00:21 +0000 [thread overview]
Message-ID: <3cdf998d-a7c1-8fed-e32c-7ebfe32ad85c@ipfire.org> (raw)
In-Reply-To: <20220824075034.2978-1-adolf.belka@ipfire.org>
[-- Attachment #1: Type: text/plain, Size: 2357 bytes --]
Yikes, another security release of a compression library.
Thank you for taking care of it, as always! :-)
Reviewed-by: Peter Müller <peter.mueller(a)ipfire.org>
> - Update from version 3.6.0 to 3.6.1
> - Update of rootfile
> - Changelog
> Libarchive 3.6.1 is a bugfix and security release.
> Security fixes:
> 7zip reader: fix PPMD read beyond boundary (#1671)
> ZIP reader: fix possible out of bounds read (OSS-Fuzz 38766 #1672)
> ISO reader: fix possible heap buffer overflow in read_children() (OSS-Fuzz 38764, #1685)
> RARv4 redaer: fix multiple issues in RARv4 filter code (introduced in libarchive 3.6.0)
> fix heap use after free in archive_read_format_rar_read_data() (OSS-Fuzz 44547, 52efa50)
> fix null dereference in read_data_compressed() (OSS-Fuzz 44843, 1271f77)
> fix heap user after free in run_filters() (OSS-Fuzz 46279, #1715)
>
> Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
> ---
> config/rootfiles/common/libarchive | 2 +-
> lfs/libarchive | 4 ++--
> 2 files changed, 3 insertions(+), 3 deletions(-)
>
> diff --git a/config/rootfiles/common/libarchive b/config/rootfiles/common/libarchive
> index c939d74f4..d6860041b 100644
> --- a/config/rootfiles/common/libarchive
> +++ b/config/rootfiles/common/libarchive
> @@ -6,7 +6,7 @@
> #usr/lib/libarchive.la
> #usr/lib/libarchive.so
> usr/lib/libarchive.so.13
> -usr/lib/libarchive.so.13.6.0
> +usr/lib/libarchive.so.13.6.1
> #usr/lib/pkgconfig/libarchive.pc
> #usr/share/man/man1/bsdcat.1
> #usr/share/man/man1/bsdcpio.1
> diff --git a/lfs/libarchive b/lfs/libarchive
> index 42040b6db..46074341a 100644
> --- a/lfs/libarchive
> +++ b/lfs/libarchive
> @@ -24,7 +24,7 @@
>
> include Config
>
> -VER = 3.6.0
> +VER = 3.6.1
>
> THISAPP = libarchive-$(VER)
> DL_FILE = $(THISAPP).tar.xz
> @@ -41,7 +41,7 @@ objects = $(DL_FILE)
>
> $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
>
> -$(DL_FILE)_BLAKE2 = e62bb0fccff23f752912de4ca6b8fd5dce6feb0e5f5d59b975d8e6fc9b3153500d6f622b4ea8c4541f0d574e7d8aa5f6903acc0c32b4e47a16f7e1b92ea952e9
> +$(DL_FILE)_BLAKE2 = e7b79e97545dabeac164069e87adbd2081d3bd75c22f80b3797c6e487a477b3f6347b6fc14c76668eb69f2f2e5dcdd5a33a694e0a292ce426b8d0d93435218cf
>
> install : $(TARGET)
>
prev parent reply other threads:[~2022-09-11 14:00 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2022-08-24 7:50 Adolf Belka
2022-09-11 14:00 ` Peter Müller [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=3cdf998d-a7c1-8fed-e32c-7ebfe32ad85c@ipfire.org \
--to=peter.mueller@ipfire.org \
--cc=development@lists.ipfire.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox